Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix: Make ZWEAM511E message more accurate #1974

Merged
merged 2 commits into from
Jan 4, 2022
Merged

Fix: Make ZWEAM511E message more accurate #1974

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
35fccbc
Make zweam511e message more generic and therefore more accurate
CarsonCook Jan 4, 2022
274cd9c
Add further possible actions
CarsonCook Jan 4, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 10 additions & 4 deletions common-service-core/src/main/resources/core-log-messages.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -152,13 +152,19 @@ messages:
- key: org.zowe.apiml.common.tlsError
number: ZWEAM511
type: ERROR
text: "The certificate of the service accessed using URL '%s' is not trusted by the API Gateway: %s"
reason: "The Gateway does not trust the requested service and refuses to communicate with it."
text: "There was a TLS request error accessing the URL '%s': '%s'"
reason: "The Gateway refuses to communicate with the requested service."
action: "Possible actions regarding to message content:\n
- Message: The certificate is not trusted by the API Gateway.\n
Action: Verify trust of the certificate is the issue by disabling certificate verification and retry the request.\n
- Message: Certificate does not match any of the subject alternative names.\n
Action: Verify that the hostname which the certificate is issued for matches the hostname of the service. \n
Action: Verify that the hostname which the certificate is issued for matches the hostname of the service.\n
- Message: Unable to find the valid certification path to the requested target.\n
Action: Import the root CA that issued services's certificate to API Gateway truststore "
Action: Import the root CA that issued services' certificate to API Gateway truststore.\n
- Message: Verify the requested service supports TLS.\n
Action: Ensure the requested service is running with TLS enabled.\n
- Message: Review the APIML debug log for more information.\n
Action: Enable APIML debug mode and retry the request, then review the APIML log for TLS errors."

# Various messages
# 600-699
Expand Down